[dns-operations] It's begun...
matthaeus.wander at uni-due.de
Tue Nov 5 16:52:06 UTC 2013
* Peter Andreev [2013-11-05 16:26]:
> 2013/10/31 Chris Thompson <cet1 at cam.ac.uk <mailto:cet1 at cam.ac.uk>>
> On Oct 24 2013, I wrote:
> But... the two Cyrillic gTLDs (xn--80asehdb & xn--80aswg) are a bit
> broken, in that NXDOMAIN responses don't validate properly.
> and there were some followups.
> Just to note that this has been fixed by now - the right NSEC3 records
> and their signatures are being returned.
> We met very similar symptoms when we were signing our zones. BIND
> simply didn't generate NSEC3 unless restarted.
The operator of xn--80asehdb. and xn--80aswg. is using a custom-made
name server according to their version.bind.
Bismarckstr. 90 / BC 316
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 5156 bytes
Desc: S/MIME Cryptographic Signature
More information about the dns-operations